Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
File:                     Q2XRedW3PoqX7eBQXynvAMLWPvk.mft (raw, json)
Hash identifier:          Z0dlpO9YVDq8iX7jzyzvs80hzA/KSgyu5sKeLa5HSlw=
Subject key identifier:   2F:FD:7B:69:6F:FE:B7:0F:5E:A6:C3:E1:BD:4F:2D:E2:7A:90:64:11
Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
Certificate issuer:       /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Certificate serial:       0380
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
Manifest number:          0375
Signing time:             Thu 23 Jul 2026 01:45:36 +0000
Manifest this update:     Thu 23 Jul 2026 01:45:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:45:35 +0000
Files and hashes:         1: Q2XRedW3PoqX7eBQXynvAMLWPvk.crl (hash: UfSgqfaV3MDNG2dfvkA2qI1kOQHgs2IqpJVQedkhEUQ=)
                          2: E9A9531644D611F0ABB89277C4F9AE02.roa (hash: Tyhx7c0DVAEQgGmo4FKMzM1+jmt5Mt3Gn4Kf+51OmGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
                          rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139555, serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
        Validity
            Not Before: Jul 23 01:45:35 2026 GMT
            Not After : Jul 30 01:45:35 2026 GMT
        Subject: CN=6a617240-9302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8d:26:ca:e7:b3:1d:99:b6:05:14:57:d1:82:
                    dd:21:3d:3a:d8:18:9c:ce:ea:18:12:33:d9:f2:fd:
                    d8:d5:b2:9c:62:64:1b:03:57:e1:42:15:af:a7:74:
                    0b:2b:0d:8a:81:79:04:d5:1c:8f:7e:7d:c2:d9:57:
                    74:e3:f6:00:58:84:80:74:84:c2:d2:0c:2c:16:5c:
                    87:a9:63:cf:1e:3d:be:66:b1:72:9b:fa:89:51:73:
                    95:bf:11:20:13:04:a7:fd:95:7b:bc:ef:8b:26:13:
                    bf:3c:d6:96:b2:fe:5d:54:f0:5a:fa:a5:55:2e:1b:
                    15:3a:b3:f0:b5:5c:33:6a:a5:95:2b:14:b9:f6:7e:
                    d4:d4:bf:03:2b:ef:2e:8e:3d:42:3f:98:05:52:5b:
                    0c:61:2f:b7:2e:75:f9:4f:39:6c:26:eb:70:11:8d:
                    36:89:a8:79:10:35:84:af:da:11:db:9f:13:d2:33:
                    dc:fc:51:a9:e4:27:74:34:cd:52:44:df:6f:c4:ae:
                    1e:e9:eb:d9:47:85:9a:b8:f5:7e:ad:86:10:05:fd:
                    9f:5c:4e:d4:0a:64:e6:9b:09:4c:2a:c5:0f:67:ee:
                    35:03:fc:29:c1:fa:e3:50:b7:eb:b9:4e:c4:e0:8b:
                    af:a8:71:e9:df:95:34:9c:0c:b9:23:8f:e1:48:35:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FD:7B:69:6F:FE:B7:0F:5E:A6:C3:E1:BD:4F:2D:E2:7A:90:64:11
            X509v3 Authority Key Identifier:
                keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:54:67:7f:57:82:f9:81:52:24:a9:a4:58:e0:fd:29:16:45:
         2c:34:77:9c:1f:58:7d:50:d3:e1:50:44:5a:b6:40:74:91:f1:
         25:57:36:59:7e:e5:cf:2b:52:0c:a1:6e:db:53:75:5d:9f:4f:
         43:85:7f:4a:25:f1:79:b7:fb:d6:9d:18:1f:0b:61:ef:07:fc:
         85:54:98:88:e5:6b:42:5c:80:36:0c:b4:bc:9f:d9:04:18:f6:
         ac:7c:3f:36:d3:f8:f1:c5:be:ca:dd:ae:22:bd:91:5c:04:ab:
         43:46:87:5d:99:bc:a4:3e:8f:4a:6a:f6:59:a9:38:99:af:be:
         8e:17:99:67:0b:13:8b:76:93:73:c4:c5:76:da:8f:27:1b:c3:
         41:eb:8a:81:55:54:2e:76:0b:5f:90:7e:03:49:3c:9e:34:55:
         59:92:cc:09:7c:cf:37:d3:bc:39:66:40:59:bb:54:76:e4:bd:
         37:b0:9c:1d:d9:96:4f:31:d3:eb:f0:75:6c:e8:dd:cd:67:c0:
         62:89:2a:4b:6d:ba:0c:1a:38:48:8b:aa:14:93:f2:37:b2:40:
         94:24:0d:35:1d:6f:a1:2a:5c:7e:0a:1c:a1:46:37:f5:eb:55:
         6d:5d:a4:dc:f3:af:57:12:18:44:65:19:ce:39:65:74:8f:05:
         80:38:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:52 2026 by rpki-client